Free Malware Removal Forum

Welcome to MalwareRemoval.com,What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

Welcome to MRU. My name is davis. I will be helping you to fix your malware problems.If your issues have been resolved or already received help elsewhere, then please let us know. If not, and still need help. Please follow the instructions in the following.In the meantime, please refrain from making any changes to your computer. Please rescan your computer and post a new HJT log and an Uninstall List.

Make an Uninstall List

1. Start HijackThis2. Click on the Config button3. Click on the Misc Tools button4. Click on the Open Uninstall Manager button5. Click on the Save list button 6. It will prompt you to save. Save this log in a convenient location. By default, it's named uninstall_list.txt.7. Copy and paste the contents in your next reply and a fresh HJT log.

Hi DavisPleasure to meet you...This is such a coincidence...You just helped my daughter clean her laptop!!!BabyGirl,remember...was just last week....Anyhow she recommended this site so i thought i would give it a whirl....thanks for your help.Below are the logs you requested:

WOW!! Glad to meet you here and pleasure to be at your service. Please subscribe to this thread to get immediate notification of replies as soon as they are posted.To do this click Subscribe topic ,then click Bookmark topic. If there's anything that you do not understand, kindly ask your questions before proceeding. Enjoy your stay in MRU and sorry for the late response!!

Note:If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer,please do so immediately.

Step2

Download random's system information tool (RSIT) by random/random from here and save it to your desktop.

Double click on RSIT.exe to run RSIT.

Click Continue at the disclaimer screen.

Once it has finished, two logs will open. Please post the contents of both log.txt (<<will be maximized) and info.txt (<<will be minimized)

I do not recommend that you have more than one anti virus product installed and running on your computer at a time. In your case, you have an outdated AVG antivrius, Authentium AntiVirus and McAfee leftoversThe reason for this is that if both products have their automatic (Real-Time) protection switched on, then those products which do not encrypt the virus strings within them can cause other anti virus products to cause "false alarms".It can also lead to a clash as both products fight for access to files which are opened again this is the resident/automatic protection. In general terms, the two programs may conflict and cause:1) False Alarms: When the anti virus software tells you that your PC has a virus when it actually doesn't. 2) System Performance Problems: Your system may lock up due to both products attempting to access the same file at the same time.Therefore please go to Add/Remove Porgrams in the control panel and remove the outdated AVG in the following.AVG 7.5

After that, Please go to Here to download Mcafee uninstaller to clean the leftovers and go to Here to download AVG Remover utility which removes all parts of AVG installation on your computer, including registry items, installation and user files on your disk, etc. Otherwise, you can choose some free programs in the following. But protection program should be one only in your system.

I see you are using Wild Tangent. It is not malware, but is sometimes thought to bring malware along. The WildTangent Web Driver is their technology that allows you to play 3D games over the Internet. Although it’s not technically considered spyware, it does have built in components to update itself and gather information about the computer system. Unless you are an extremely avid games player, I recommend you uninstall Wild Tangent.

Viewpoint is considered foistware instead of malware because it is installed without users approval, but doesn't spy or do anything "bad". You may like to read this article about the potential of this Viewpoint software here:http://www.clickz.com/news/article.php/3561546

Search Assistant that came preloaded with Dell computers. There were concerns over this toolbar as it was difficult to remove and anonymously reports your surfing activity when on a myway or myway affiliated site. You are well adivised to remove it.

OTMoveIt3 by OldTimer - Version 1.0.8.0 log created on 02052009_185044

Files moved on Reboot...DllUnregisterServer procedure not found in C:\DOCUME~1\PF86A~1.JEN\LOCALS~1\Temp\IadHide5.dllC:\DOCUME~1\PF86A~1.JEN\LOCALS~1\Temp\IadHide5.dll NOT unregistered.C:\DOCUME~1\PF86A~1.JEN\LOCALS~1\Temp\IadHide5.dll moved successfully.File move failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be moved on reboot.

From within Internet Explorer click on the Tools menu and then click on Options.

Click once on the Security tab

Click once on the Internet icon so it becomes highlighted.

Click once on the Custom Level button.

Change the Download signed ActiveX controls to Prompt

Change the Download unsigned ActiveX controls to Disable

Change the Initialize and script ActiveX controls not marked as safe to Disable

Change the Installation of desktop items to Prompt

Change the Launching programs and files in an IFRAME to Prompt

Change the Navigate sub-frames across different domains to Prompt

When all these settings have been made, click on the OK button.

If it prompts you as to whether or not you want to save the settings, press the Yes button.

Next press the Apply button and then the OK to exit the Internet Properties page.

Use a Firewall - I can not stress how important it is that you use a Firewall on your computer. Without a firewall your computer is succeptible to being hacked and taken over. I am very serious about this and see it happen almost every day with my clients. Simply using a Firewall in its default configuration can lower your risk greatly. Otherwise, there are some free firewalls in the following:

Install a-squared Free -a-squared free is a product from Emsi Software provided free for private use that can detect and remove a variety of malicious software. If you have a dialup internet connection, you may also like to install a-squared Anti-Dialer which provides some real time protection against premium rate dialers

HI DavisOk i made the changes you said to make and i installed a firewall and the spyware blaster. Will anything interfere with AVG since i have now upgraded to 8.0 and everything is active on that program? Also i could not find the RSIT program in my C drive. Can you help me locate it so i can delete it?Things seem to be running a bit better....Thank you so much for all of your help. Really appreciate it!!

It's ok to have one antivrus and one antispyware real time protection on. No more than that.

The RIST normally should be on your desktop, but I have no idea why it happened to some unusual location.

Please navigate to Start > My Computer > Tools > Folder Options. Select the View tab. Under the "Hidden Files and Folders" heading, uncheck "Do not show hidden files and folders". Click Yes to confirm. Then navigate to the following filepath and delete the RIST.

Who is online

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.